medium5.0
CVE-2013-2629
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) a…
Impact
Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite actions in action.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idleman | Leed | through 1.4 |